JSI Tip 1485. Can't logon to LAN because of RAS lockout?

If you have the Account Lockout feature enabled, unsuccessful attempts to logon via RAS will trigger the lockout.

To resolve the problem, apply SP4 or later.

If your RAS server is NOT a Domain Controller, run Raslock.exe to install the RAALM
(Remote Access Account Lockout Manager). In Control Panel / Services,
configure its' Startup to use a Domain Admins account (any account that has the right to edit user accounts).